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CLAIMS 

1 . Method for distribution of software components, comprising 

deriving a first software component identifier from a relevant software component; 
creating integrity test data by performing an integrity test on the software component; 
5 - creating an integrity certificate comprising the integrity test data using the first software 
component identifier by the integrity certificate originator; 
retrieving the software component by a user's computer (3); 
deriving by the user's computer (3) a second software component identifier from the 
downloaded software component; 
10 - retrieving the integrity certificate by the user's computer (3) using the second software 
component identifier; 

disclosing the integrity test data to a user by the user's computer (3). 

2. The method according to claim 1, further comprising registering in a certificate register (4) 
15 the integrity certificate of the relevant software component using the first software component 

identifier; 

3. The method according to claim 2, wherein the retrieving of the integrity certificate comprises 
the accessing of the certificate register. 

20 

4. The method according to any of the claims 1-3, further comprising verifying the identity of 
the integrity certificate originator. 

5. The method according to claim 4, further comprising adding a digital signature to the 
25 integrity certificate. 

6. The method according to claim 5, comprising verifying the digital signature. 

7. The method according to any of the preceding claims, further comprising matching the 
30 retrieved integrity data to a user's preferred requirements. 

8. The method according to claim 1 , wherein the relevant integrity certificate is retrieved from a 
register at the user's side. 

35 9. The method according to claim 1, wherein the relevant integrity certificate is retrieved from 
the relevant software component supplier's computer. 

10. The method according to claim 1, wherein the relevant integrity certificate is retrieved from a 
trusted certificates originator's computer. 
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11. The method according to any of the preceding claims, wherein the integrity certificate is 
mailed through email to the user's computer (3). 

12. A server (4) , arranged for 

5 - deriving a first software component identifier from a relevant software component; 

creating integrity test data by performing an integrity test on the software component; 
creating an integrity certificate comprising the integrity test data by a certificate 
originator; 

labeling the integrity certificate with the first software component identifier by the 
1 0 integrity certificate originator; 

allowing the retrieval of the software component by a user's computer (3); 
allowing the retrieval of the integrity certificate by the user's computer (3) using the 
second software component identifier; 

15 1 3. A user 1 computer (3), arranged for 

retrieving a software component by a user's computer (3); 
deriving by the user's computer (3) second software component identifier from the 
downloaded software component- 
retrieving the integrity certificate using the software component identifier; 

20 - disclosing integrity test data to a user . 

14. A data carrier such as a magnetic or optical disk, comprising a computer program for 
installation on a user's computer (3) , for arranging the user's computer (3) to perform the steps 
of: 

25 - retrieving a software component by a user's computer (3); 

deriving by the user's computer (3) a software component identifier from the retrieved 
software component; 

retrieving the integrity certificate using the software component identifier; 
disclosing integrity test data to a user . 
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